General
- Target signed_19272.exe
- Size 762KB
- Sample201202-weggxtjypj
- SHA256 badf7e8ef826b51aaa028ec3a296f7b9432474d8b6377552f0dcbfd520c0df47
- MD5 5c4d07a720f5c685101f5872a49dae10
- SHA1 d1c2807ecbd72963a5c9a31216422ce7d5297955
- SHA512 83953b538996589c7aa0f24ff5dd490c0ae376f9b5863bae83ee097fdd63a27c1ba5dd3126c3dec429aa9a6b075e170c4ccd887e8cc31acf56c086e6d84daf5d
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
signed_19272.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
signed_19272.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target signed_19272.exe
- Size 762KB
- SHA256 badf7e8ef826b51aaa028ec3a296f7b9432474d8b6377552f0dcbfd520c0df47
- MD5 5c4d07a720f5c685101f5872a49dae10
- SHA1 d1c2807ecbd72963a5c9a31216422ce7d5297955
- SHA512 83953b538996589c7aa0f24ff5dd490c0ae376f9b5863bae83ee097fdd63a27c1ba5dd3126c3dec429aa9a6b075e170c4ccd887e8cc31acf56c086e6d84daf5d
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext